CVE-2006-4095

HIGH

7.5

CVSS Score

Published: September 6, 2006 at 12:00 AM UTC

Updated: June 16, 2026 at 10:28 PM UTC

4 products affected across 3 vendorsmacOSUbuntu LinuxMac OS X Server

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 12%

Description

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Mac OS X Server · Apple

95%

v < 10.3.910.4.0 ≤ v < 10.4.9

Affected range stops below 10.3.9, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.4.9, so it looks safe — our inference, not a vendor statement

macOS · Apple

95%

v < 10.3.910.4.0 ≤ v < 10.4.9

Affected range stops below 10.3.9, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.4.9, so it looks safe — our inference, not a vendor statement

Ubuntu Linux · Canonicalrubygems

95%

5.04 5.10 6.06

BIND · Isc

95%

v ≤ 9.2.69.3.0 ≤ v ≤ 9.3.2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (35)

x_refsource_CONFIRMBroken Link

Source: [email protected]

http://docs.info.apple.com/article.html?artnum=305530

Vendor Advisoryx_refsource_APPLEMailing List

Source: [email protected]

http://lists.apple.com/archives/security-announce/2007/May/msg00004.html